Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
File: TzvVbotU5tonu-ZiLaxny_Aqgeo.mft (raw, json)
Hash identifier: NoD4yCGg6SfaG6Nn3EELETUcRwNd0mQlbZMLY0bfjDQ=
Subject key identifier: C6:54:D4:D2:A4:60:2D:5C:F2:33:F6:13:BF:86:C7:1F:1E:B4:23:F0
Authority key identifier: 4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA
Certificate issuer: /CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea
Certificate serial: 019A4E18E922F78220A988939A1BAD0755C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 09:00:46 +0000
Manifest this update: Tue 04 Nov 2025 09:00:46 +0000
Manifest next update: Wed 05 Nov 2025 09:00:46 +0000
Files and hashes: 1: 6aBtyL1HCBLQz8Fcxx2-wbI-JSY.roa (hash: s+Yjky9WV0WGtiJ2UXV97kZc6gRv1napm2o37+mL6NI=)
2: R0B0S-Vvq6PSGq8IAqKsdnjdNUo.roa (hash: jZBNXVMhAxnq4wWzeXUVcxAP1mha5zeShrdHGeYvBL4=)
3: TzvVbotU5tonu-ZiLaxny_Aqgeo.crl (hash: fLZ7oICveCEePAUXW0PL44aFACq3qoe3/lIFXDJpDpE=)
4: snxuxsWrIVBOH4PJX-798Ws3-_I.roa (hash: eUyKfNa1R42Kf80mOcHHq43jou6WV27ocUUMJBjr/10=)
5: wnKhG27ddvv9DbopEcZ0e8BfSyE.roa (hash: 5bhpzUqfkiYr3WyfWoYZHsfUt3MVDy9FbR7pi02+AvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:e9:22:f7:82:20:a9:88:93:9a:1b:ad:07:55:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea
Validity
Not Before: Nov 4 09:00:46 2025 GMT
Not After : Nov 5 09:00:46 2025 GMT
Subject: CN=c654d4d2a4602d5cf233f613bf86c71f1eb423f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:71:57:cc:74:4a:77:96:40:de:da:72:9c:d9:
0a:5d:c1:4c:93:c8:5d:87:76:f9:c2:9d:e5:95:28:
d1:8d:38:8d:0d:5a:ef:ce:73:bc:6f:77:ef:77:77:
9d:68:e6:ff:5b:25:b5:fa:5f:8f:10:d0:19:9d:c4:
13:cd:89:cc:8b:cd:cb:95:36:db:db:56:07:6d:76:
9b:7b:a0:45:9e:94:22:6f:a9:4c:5d:d9:c7:fd:1a:
c5:6c:10:90:54:8f:85:ab:74:5e:4e:47:0d:6b:ea:
51:66:31:2d:f4:b8:81:07:14:b8:6c:ef:ca:ef:15:
d8:81:cc:b4:90:a5:d5:d2:b9:57:6b:16:22:a7:78:
1a:50:c4:c8:6b:90:a2:5b:51:65:51:cd:1b:7c:39:
1d:4d:ed:66:8a:05:e2:0d:03:f7:98:d1:07:1b:62:
f1:08:29:7b:f1:05:dd:df:81:43:e6:dd:eb:19:e5:
1b:58:14:5a:b9:1b:30:39:26:24:d2:b6:fd:32:2e:
15:65:e0:b4:3c:f9:3c:fc:07:ea:50:81:ae:50:47:
d0:04:a5:4c:fe:e1:90:a1:58:cc:b8:12:b2:f0:cb:
28:e1:da:48:4f:2f:10:86:93:b8:ea:58:5a:b7:4d:
b1:a5:9a:ae:50:61:1f:31:40:05:d7:e3:0a:8e:61:
1a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:54:D4:D2:A4:60:2D:5C:F2:33:F6:13:BF:86:C7:1F:1E:B4:23:F0
X509v3 Authority Key Identifier:
keyid:4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:3a:c7:c8:5f:ee:4d:6e:e7:77:4e:72:46:de:f9:2e:73:b8:
bd:72:6a:e5:8c:bc:17:74:66:f6:f1:91:85:b7:a7:1c:6b:7f:
7c:11:23:fb:21:c2:31:c1:0c:a6:c1:e8:92:d1:14:00:74:1f:
6a:27:9d:4a:0d:f5:04:a8:cd:52:e9:4b:cc:a1:7c:fd:4b:5b:
d3:f9:92:d4:48:6d:b5:ae:b0:d6:23:76:0e:a8:f3:6a:9d:fd:
8c:87:84:b6:cb:df:9c:15:06:18:86:ca:e6:df:2d:09:f6:44:
3b:c2:11:fd:e1:b2:77:29:a2:27:43:f7:fc:55:bb:61:bb:53:
60:78:22:3f:f2:0e:76:22:b4:eb:03:a5:16:dd:82:3b:88:c5:
8b:8d:26:f9:04:51:31:d4:35:44:e3:82:67:c6:27:ed:0c:c3:
a3:40:2a:c4:67:4e:ec:04:bb:c1:40:f8:bc:6f:54:ad:58:0a:
4a:dc:e0:5c:38:d0:db:83:bf:82:99:35:a5:0f:40:26:9e:10:
91:96:53:7f:fd:35:61:21:d5:33:9b:18:dd:08:5d:f5:80:a5:
f4:60:b6:5f:d5:5f:14:da:03:3d:a8:c8:1c:28:21:74:51:01:
a3:d6:e6:44:b5:b5:3f:c9:0e:54:26:5b:75:00:a1:98:5f:6b:
ac:aa:ac:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:41 2025 by rpki-client